cluster

type Cilium struct {
	MTU                   int      `json:"mtu,omitempty"`
	Devices               []string `json:"devices,omitempty"`
	BGPControlPlane       *bool    `json:"bgpControlPlane,omitempty"`
	RoutingMode           string   `json:"routingMode,omitempty"` // tunnel (default) or native
	IPv4NativeRoutingCIDR string   `json:"ipv4NativeRoutingCIDR,omitempty"`
	IPv6NativeRoutingCIDR string   `json:"ipv6NativeRoutingCIDR,omitempty"`
	AutoDirectNodeRoutes  *bool    `json:"autoDirectNodeRoutes,omitempty"`
}

type ClusterConfig struct {
	APIVersion string `json:"apiVersion,omitempty"`
	Kind       string `json:"kind,omitempty"`
	Spec       Spec   `json:"spec"`
	// contains filtered or unexported fields
}

type Dashboard struct {
	Enabled         *bool  `json:"enabled,omitempty"`
	NodePort        *int   `json:"nodePort,omitempty"` // default 30443; 0 serves on a ClusterIP only
	PublicURL       string `json:"publicURL,omitempty"`
	TLSSecretName   string `json:"tlsSecretName,omitempty"`
	EnableNodeShell *bool  `json:"enableNodeShell,omitempty"` // the privileged host shell (default on, off under cis)
	TokenSecrets    *bool  `json:"tokenSecrets,omitempty"`    // admin and viewer sign-in tokens as Secrets (default on)
}

type Network struct {
	PodCIDR       string  `json:"podCIDR,omitempty"`     // default 10.245.0.0/16; "v4,v6" for dual-stack; set at first boot, a join must match
	ServiceCIDR   string  `json:"serviceCIDR,omitempty"` // default 10.96.0.0/12; set at first boot, a join must match
	ClusterDomain string  `json:"clusterDomain,omitempty"`
	NodeIP        string  `json:"nodeIP,omitempty"` // override autodetection
	Cilium        *Cilium `json:"cilium,omitempty"`
}

type NodeState = nodestate.NodeState

type S3 struct {
	Bucket   string `json:"bucket"`
	Prefix   string `json:"prefix,omitempty"`
	Region   string `json:"region,omitempty"`
	Endpoint string `json:"endpoint,omitempty"`
	// PathStyle selects path-style addressing, which MinIO, Ceph and most
	// non-AWS endpoints need.
	PathStyle bool `json:"pathStyle,omitzero"`
}

type Snapshot struct {
	Disabled      bool   `json:"disabled,omitempty"`
	IntervalHours int    `json:"intervalHours,omitempty"` // default 12
	Retain        int    `json:"retain,omitempty"`        // default 5
	S3            *S3    `json:"s3,omitempty"`
	Dir           string `json:"dir,omitempty"`
}

type Spec struct {
	Network   Network    `json:"network,omitempty"`
	VIP       VIP        `json:"vip,omitempty"`
	Storage   Storage    `json:"storage,omitempty"`
	Operator  *bool      `json:"operator,omitempty"`  // HelmChart + manifest-deployer controller (default on)
	Profile   string     `json:"profile,omitempty"`   // the node profile, by name; "" for none
	CIS       bool       `json:"cis,omitempty"`       // legacy spelling of profile: cis; LoadConfig folds it into Profile
	Snapshot  Snapshot   `json:"snapshots,omitempty"` //
	CertRenew *bool      `json:"certRenew,omitempty"` // rotate expiring leaves automatically (default on)
	SELinux   *bool      `json:"selinux,omitempty"`   // label Stratum's files for container-selinux (default on)
	Dashboard *Dashboard `json:"dashboard,omitempty"`
}

type StackContext struct {
	ClusterDomain string
	ServiceCIDR   string
}

type Storage struct {
	// Default StorageClass backend: "local-path" (default) or "none".
	Default string `json:"default,omitempty"`
}

type VIP = nodestate.VIP

type WorkerConfig struct {
	NodeIP        string // spec.network.nodeIP
	SELinuxOptOut bool   // spec.selinux: false
}

type WorkerOptions struct {
	// Server is the control-plane or VIP URL to join (--server); empty on a
	// restart.
	Server string
	// Token is the bootstrap token the join authenticates with.
	Token string
	// CAHash is the "sha256:<hex>" pin of the cluster CA
	// (--discovery-token-ca-cert-hash).
	CAHash string
	// NodeIP is --node-ip; empty leaves spec.network.nodeIP, $NODE_IP and
	// detection to the join, and the saved address, else $NODE_IP and
	// detection, to a restart. A restart given one that differs moves the
	// worker to it and saves it, once it is an address the worker can
	// register: an IPv4 address on a single-stack worker, its v4,v6 pair on a
	// dual-stack one.
	NodeIP string
	// ConfigNodeIP is spec.network.nodeIP from the config file, which only a
	// join reads. It is kept apart from NodeIP, which outranks it, so the join
	// names the source its address came from.
	ConfigNodeIP string
	// ServiceCIDR, PodCIDR and ClusterDomain describe a cluster that does not
	// use the defaults. A restart reads only PodCIDR, to record the range a
	// legacy worker, or one joined without --pod-cidr, never saved, or to
	// replace the default an earlier release saved for such a join.
	ServiceCIDR   string
	PodCIDR       string
	ClusterDomain string
	// Profile selects the named node profile on a join.
	Profile string
	// SELinuxOptOut is spec.selinux: false from the config file, nil when a
	// restart's file does not set it; a restart saves a changed setting.
	SELinuxOptOut *bool
	// DualStack registers a v4,v6 node IP pair on a join (--dual-stack).
	DualStack bool
}